Re: Storing encrypted passwords on AS400

Ciao.

Brett Slocum wrote:

On Wed, 09 Feb 2005 20:05:26 +0100, Franco Biaggi <fbiaggi@xxxxxxxxxx> wrote:

this is possible, due to data conversions...
try to store the passwords in plain text like:

String encrypted_pwd = SecurityHandler.encryptToString( enteredPassword );

The only problem with this method is that the Strings generated are 40
characters long (I just ran a test case), and the password field in
the database is only 25 characters long. I'm trying to change the
method of encryption without changing the database. We are installed
in hundreds of locations and updating the AS400 library is only done
when absolutely necessary.

Is there a way to pack these bytes closer and still use Strings? I
realize that packing them as single characters is what is giving me
the headache in the first place.

If I have to, I'll change the field length, but this would be a last
resort, and would delay the change for at least 6 months.

--
-----------------------------------------------------------------------------
*** This messages was scanned for malicious contents ***
-----------------------------------------------------------------------------
Franco Biaggi
CH-6807 Taverne